Overview

overview

10

Static

static

e7e9ac9bbc...d1.dll

windows7_x64

10

e7e9ac9bbc...d1.dll

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4971864288559104.zip

  • Size

    398KB

  • Sample

    220117-q93c4sahbl

  • MD5

    bf4f92532c20fb0dc26d075da0af3f1d

  • SHA1

    200fd69aff63f5715d0de11f58c1dfc6fdd2cd75

  • SHA256

    9fe0c3264f1d2d988f1f8065becce847dcdba00c8e268c112f800feb9ae9e899

  • SHA512

    78837733f7650f090f8d55aa2d4cd855555f663e9cf31382fc96b7ca543287acc047f15ed781f7f3b297252a6052053c20a598ff98313436c978fcec0210f8ed

Score
10/10
qakbotobama1131634023197bankerevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama113

Campaign

1634023197

C2

73.52.50.32:443

167.248.117.81:443

209.236.35.178:443

67.230.44.194:443

72.173.78.211:443

146.66.238.74:443

181.118.183.94:443

94.200.181.154:443

81.250.153.227:2222

69.30.186.190:443

93.48.58.123:2222

136.232.34.70:443

103.142.10.177:443

185.250.148.74:443

174.54.193.186:443

39.49.64.244:995

89.137.52.44:443

77.31.162.93:443

24.107.165.50:443

73.230.205.91:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      e7e9ac9bbc69589e627f913f8605938b96afd929ebc974ffa0955598d19498d1

    • Size

      756KB

    • MD5

      acdcd26de7e78893c0b6861316721469

    • SHA1

      2f8716ea8f2747f7fdac054ec58644d6a3a175a4

    • SHA256

      e7e9ac9bbc69589e627f913f8605938b96afd929ebc974ffa0955598d19498d1

    • SHA512

      84c29ce85551beda34e86c56da1d0a2a97f080b0073de679183eb5a1493c3a2bd760d414526f43643ec9689a3a010ed357e9428d4bd18c08cc664c9903f00aa7

    Score
    10/10
    qakbotobama1131634023197bankerevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Disabling Security Tools

1
T1089

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks